CVE-2005-2572
MySQL, when running on Windows, allows remote authenticated users with insert privileges on the...
MySQL, when running on Windows, allows remote authenticated users with insert privileges on the mysql.func table to cause a denial of service (server hang) and possibly execute arbitrary code via (1) a request for a non-library file, which causes the Windows LoadLibraryEx function to block, or (2) a request for a function in a library that has the XXX_deinit or XXX_init functions defined but is not tailored for mySQL, such as jpeg1x32.dll and jpeg2x32.dll.
Exploit likelihood
What each source reports
NVD Score used
MySQL, when running on Windows, allows remote authenticated users with insert privileges on the mysql.func table to cause a denial of service (server hang) and possibly execute arbitrary code via (1) a request for a non-library file, which causes the Windows LoadLibraryEx function to block, or (2) a request for a function in a library that has the XXX_deinit or XXX_init functions defined but is not tailored for mySQL, such as jpeg1x32.dll and jpeg2x32.dll.
- Record
CVE-2005-2572- CVSS 2.0
- 8.5 High
AV:N/AC:M/Au:S/C:C/I:C/A:C - Updated
- 2026-11-02
CVE List No score
MySQL, when running on Windows, allows remote authenticated users with insert privileges on the mysql.func table to cause a denial of service (server hang) and possibly execute arbitrary code via (1) a request for a non-library file, which causes the Windows LoadLibraryEx function to block, or (2) a request for a function in a library that has the XXX_deinit or XXX_init functions defined but is not tailored for mySQL, such as jpeg1x32.dll and jpeg2x32.dll.
- Record
CVE-2005-2572- Updated
- 2026-11-02
EUVDEUVD-2005-2573 No score
MySQL, when running on Windows, allows remote authenticated users with insert privileges on the mysql.func table to cause a denial of service (server hang) and possibly execute arbitrary code via (1) a request for a non-library file, which causes the Windows LoadLibraryEx function to block, or (2) a request for a function in a library that has the XXX_deinit or XXX_init functions defined but is not tailored for mySQL, such as jpeg1x32.dll and jpeg2x32.dll.
- Record
EUVD-2005-2573- Updated
- 2026-11-03
GitHub AdvisoriesGHSA-654g-56x3-m3r6 No score
MySQL, when running on Windows, allows remote authenticated users with insert privileges on the...
MySQL, when running on Windows, allows remote authenticated users with insert privileges on the mysql.func table to cause a denial of service (server hang) and possibly execute arbitrary code via (1) a request for a non-library file, which causes the Windows LoadLibraryEx function to block, or (2) a request for a function in a library that has the XXX_deinit or XXX_init functions defined but is not tailored for mySQL, such as jpeg1x32.dll and jpeg2x32.dll.
- Record
GHSA-654g-56x3-m3r6- Updated
- 2026-11-02
Affected products
History
| Recorded | Changed | Sources |
|---|---|---|
| aliases | EUVD | |
| first indexed | CVE List, GitHub Advisories, NVD |
Dates are when Every CVE recorded each change. Upstream dates may differ.
In short
CVE-2005-2572 is a high vulnerability (CVSS 8.5) in Oracle Mysql, published August 16, 2005. No source lists public exploit code. EPSS puts the chance of exploitation in the next 30 days at 4.73%, the 91st percentile. No source names a fixed version.
References
h20565.www2.hp.com/portal/site/hpsc/template.PAGE/public/kb/docDisplay?docId=emr_na-c03897409
exchange.xforce.ibmcloud.com/vulnerabilities/21756
securityfocus.com/bid/62358
securitytracker.com/id/1029010
appsecinc.com/resources/alerts/mysql/2005-003.html
secunia.com/advisories/54788
marc.info?l=bugtraq&m=112360818900941&w=2
nvd.nist.gov/vuln/detail/CVE-2005-2572
github.com/advisories/GHSA-654g-56x3-m3r6